Last updated 20 September 2026

Who we are

Loveclub is provided by Barek Technologies Ltd, a company registered in Nigeria, with its registered office at [COMPANY REGISTERED ADDRESS], Lagos, Nigeria (“Loveclub”, “we”, “us”). We are the data controller for the personal information described in this policy. You can reach our privacy contact at privacy@myloveclub.ai.

The short version

Loveclub stores the information you choose to add so it can provide relationship prompts, plans, reminders, and private memory features. We do not sell your personal information, do not use it for advertising, do not share it with data brokers, and do not use private content to train AI models — ours or anyone else's. You can view what personalisation uses, export your data, and delete your account from the Me tab.

Information we collect

Account information: your email address, display name, pronouns, language, timezone, sign-in identifiers (including an Apple or Google identifier if you use those sign-in options), your acceptance of these terms, subscription status, and settings. Relationship information you enter: partner-profile details (name, pronouns, love style, key dates), relationship stage and start date, facts about your relationship you choose to record (for example whether you live together, have children, are non-monogamous, or want intimacy-related suggestions), saved memories and moments, map pins, private photo albums, prompts and how they went, weekly check-ins (connection, tension, desire or closeness, and an optional note), plans, messages you log, reminders, challenge progress, conflict notes, couple-quiz answers, and Know Your Partner invite responses. Technical information: a device push token if you enable notifications, your device's coarse locale and timezone, a hashed abuse-prevention identifier on public invite pages, and crash reports if crash reporting is enabled in the build you are using. Subscription information: your Loveclub Plus status, product, store, renewal date, and an anonymous store transaction reference — never your card or bank details, which Apple and Google keep.

Sensitive information and your explicit consent

Much of what you may add to Loveclub is intimate: details about your romantic and sexual relationship, weekly desire and closeness check-ins, conflict notes, pronouns, and settings that may reveal sexual orientation or relationship structure. In many countries (including under the EU and UK GDPR and Nigeria's Data Protection Act) this is “special category” or “sensitive” personal data that we may only process with your explicit consent. When you create an account you expressly consent to Loveclub processing this information for the purposes in this policy. You can withdraw that consent at any time by deleting the relevant content or your account; withdrawing consent does not affect processing that happened before. Some information you enter is about your partner; enter only what you are entitled to share, and tell your partner that you use Loveclub.

Why we use information and our legal bases

We use your information to: create and secure your account and provide the service you asked for (performance of our contract with you); select and personalise prompts, save the memories, plans, and reminders you request, deliver the notifications you turned on, and run the safety check on check-in notes (your explicit consent for sensitive information, and our contract with you); keep the service secure, prevent abuse, and fix errors (our legitimate interest in running a safe service); reply to support and honour legal requests (legal obligation and legitimate interest); and run anonymous research from couple-quiz answers only when both people switched it on (consent). Automated personalisation suggests content; it does not make decisions with legal or similarly significant effects about you, and it never diagnoses you or your relationship. We do not use your information for advertising and we do not sell or “share” it for cross-context behavioural advertising.

AI-assisted features

Loveclub uses OpenAI's API as its only AI provider, and every AI call is made from our servers, never from your device with a bundled key. What is sent depends on the feature, and each is described in Me → AI: the Plus prompt rewrite (a library suggestion plus a limited profile: your partner's first name replaced by a token, love style, stage, up to six saved facts and a few recent moments, with dates as relative deltas); the Say coach, only when you open it and type (the text you type, with your partner's name replaced by a token; the transcript is not stored on our servers); a safety classifier on check-in notes and similar free text (the text, name-tokenised); the chapter writer, only when you tap “Write with AI” (counts, months, a place name, an idea title, milestone dates — never your notes or photos); and a memory helper that currently runs in shadow mode and writes nothing. Loveclub does not use your content to train any AI model, and we have not opted our API usage into OpenAI model training; OpenAI may retain API inputs for a short period for abuse monitoring under its API data policies. Your account holds a separate model-improvement switch that is off by default and is not used by any feature today; if we ever launch such a programme it will require a separate, explicit opt-in. You can turn AI personalisation off in Me → AI; AI features fall back to non-AI content when off or unavailable. Do not enter secrets, credentials, or information you do not want an AI provider to process.

Services that process information for us

We share personal information only with providers that process it on our instructions under a data-processing agreement, or where you direct it. Supabase (authentication, database, file storage, and server functions — our systems of record); OpenAI (AI features above); Expo (push-notification delivery: your push token and a neutral notification body); Apple and Google (sign-in when you choose it, app distribution, push delivery, and all billing); RevenueCat (subscription status, product, store, and an anonymous app-user identifier, so Plus works across your devices); Mapbox (map tiles for Our Map; its SDK's usage telemetry is switched off in the app); Foursquare (nearby-place search: the coordinates and category you search with, sent while Our Map is open and not stored by us); Google (Calendar events only if you connect Google Calendar; tokens are encrypted at rest and you can disconnect in Me); Sentry (crash and error reports, without personal content, in builds where crash reporting is enabled); and Vercel (hosting of myloveclub.ai, including the partner quiz and invite pages, which receive the standard web-server log data such as IP address). We require each provider to protect your information at least as well as this policy describes. We do not use analytics or advertising SDKs.

Your partner, quizzes, and invite links

Loveclub is one account per relationship, so most of what you add is about, or shared with, one other person. Couple quiz: you answer in the app, then send your partner a link. Your partner can answer on the web without an account; the page shows them your first name and the questions. Their answers are stored with your relationship, and once both of you have answered, both of you see the reveal (each other's answers and guesses). For rate limiting we store a keyed one-way hash derived from the visitor's IP address, never the address itself. If both of you switch on the research option, an anonymous copy of the answers — no names, account, session, free text, or exact dates — is added to a research pool we use to write better ideas; because it is anonymous it cannot be pulled back out later. Know Your Partner invites: your partner can answer a single-use link that expires after seven days; their answers are stored with your account as proposed changes for you to review. Anyone with an active link can open it, so share links carefully. If you are a partner answering a link and want your answers removed, ask the person who sent it or write to privacy@myloveclub.ai.

Photos, memory places, and location

Photos you choose for the Wall are converted into compressed display and thumbnail copies before upload; we do not read EXIF metadata and do not use photo GPS data to create map pins. The copies are stored in access-controlled Supabase Storage and displayed through time-limited signed links; deleting a photo or album removes its storage object. Memory-place pins are added by hand and rounded to approximate city precision. While Our Map is open, and only if you grant permission, the app reads your device location to centre the map and to search for places near you; the coordinates are sent to our server and on to Foursquare for that search and are not stored by us. The app never requests background location. Chapter cards you save to Photos are written to your device's photo library only when you tap Save.

Notifications

If you turn notifications on, we store a device push token and your preferred time and weekdays, and we send reminders you asked for (daily idea, key dates, weekly check-in, streak, chapters) at your local time through Expo's push service and Apple or Google. Notification text is deliberately neutral and never contains the idea itself. You can pause or turn off each kind in Me → Notifications; turning notifications off in your device settings also stops delivery.

Subscriptions and payments

Loveclub Plus is sold as an in-app subscription through Apple or Google, which handle payment and hold your payment details; we never see your card number. We receive from RevenueCat and the store the subscription status, product, store, renewal or expiry date, environment, and a store transaction reference so that Plus works for both of you on every device. A small ledger of billing events is kept for fraud prevention.

Storage, security, and retention

Your data is stored by Supabase in the [SUPABASE PROJECT REGION] data-centre region, protected by row-level access controls that limit each account to its own records, encryption in transit, and encryption at rest by the provider; Google Calendar tokens are additionally encrypted with our own key. Some app state is stored on your device, such as your preferences. No online service can guarantee absolute security; if a breach affecting you occurs, we will notify you and the relevant authority as the law requires. Retention: account and relationship data is kept while your account exists; scheduled deletion becomes permanent seven days after you request it; invite and quiz links expire after seven days; the personalised prompt cache is cleared after seven days; AI usage telemetry after 90 days; prompt history after 90 days; AI audit entries after 180 days; safety-routing events and completed reminders after one year; and rate-limit counters after two days. Provider backups expire under the provider's schedule shortly after deletion.

Your rights and choices

In the app you can edit profile information, review what personalisation uses (Me → What Loveclub uses), remove photos and albums, reset learned preferences, disconnect Google Calendar, pause notifications, turn AI personalisation off, export your structured account data as JSON, and request or cancel account deletion (Me → Data & account). If you cannot access the app, use the public account-deletion page. Depending on where you live, you also have the right to access your personal information, correct it, delete it, receive a portable copy, restrict or object to processing, withdraw consent at any time, and not be subject to solely automated decisions with legal effects. To exercise a right, write to privacy@myloveclub.ai; we may ask you to verify your identity, we will reply within 30 days (or sooner where the law requires), and we will not treat you differently for exercising a right. You may also complain to a supervisory authority: in Nigeria the Nigeria Data Protection Commission, in the EU your national data-protection authority, in the UK the Information Commissioner's Office. California residents: we do not sell or share personal information, do not use sensitive personal information for anything beyond providing the service you asked for, and honour the rights to know, delete, correct, and non-discrimination described here; an authorised agent may act for you with your written permission.

Where your information is processed

We are based in Nigeria and use providers in the United States and the European Union, so your information will be transferred across borders. Where the law requires, we rely on appropriate safeguards: for personal data from the EU and UK, the European Commission's standard contractual clauses (with the UK addendum) built into our providers' data-processing agreements and, where available, the EU–US Data Privacy Framework certification of the provider; for personal data from Nigeria, the transfer conditions of the Nigeria Data Protection Act 2023. You can ask privacy@myloveclub.ai which safeguard applies to a given provider.

Children

Loveclub is for adults. You must be at least 18 to create an account, and the app is not directed to anyone under 18. We do not knowingly collect personal information from minors; if you believe a minor has provided information, contact us so we can investigate and delete it.

Safety

Relationship information can be sensitive. Use Loveclub only on a device and account you consider safe. Loveclub is not an emergency, medical, legal, or mental-health service, and the safety check does not monitor you or alert anyone. If you are in immediate danger, contact local emergency services or a trusted specialist service; Me → Resource directory lists some by region.

Changes to this policy

We may update this policy as Loveclub changes. The date above shows the latest revision. If a change materially reduces your rights or expands what we collect or share, we will tell you in the app and ask for your agreement again where the law requires it before the change applies to you.

Contact

For privacy questions or requests, email privacy@myloveclub.ai or write to Barek Technologies Ltd, [COMPANY REGISTERED ADDRESS], Lagos, Nigeria. To help protect your account, we may need to verify your identity before completing a request.